Privacy Policy
Who we are
Take Study ("we", "us") hosts online surveys on behalf of the organisations that invite people to take them. This policy explains what personal information we handle, why, and the rights you have over it. You can reach us at info@take.study.
Our role under data protection law
For the answers you give in a survey and any contact details you provide in it, the organisation that invited you to the survey decides why and how that information is used. Under the EU and UK General Data Protection Regulation (GDPR) that organisation is the controller and we are its processor: we handle the information only on its documented instructions and under a written data processing agreement. Requests about survey data are passed to that organisation, and it is responsible for answering them.
For this website, for messages you send to us directly and for the technical records needed to keep the service secure, we are the controller.
What we collect
- Survey responses: the answers you give, collected on behalf of the organisation running the study.
- Contact details: a mobile phone number or email address, only when you provide it in a survey and agree to be contacted.
- Technical information needed to run a survey and keep it secure: device type, browser, IP address, the time of each page and a per-interview session identifier.
- Messages you send to us.
We do not collect special categories of personal data unless a survey asks for them and the organisation running it has established a lawful basis, such as your explicit consent, for doing so.
Why we use it and our legal bases
- To deliver a survey you were invited to and keep it working: performance of the task the controller has engaged us for, and our legitimate interest in running a reliable service (Article 6(1)(b) and 6(1)(f) GDPR).
- To send the reminder and follow-up messages you opted into: your consent (Article 6(1)(a)), which you can withdraw at any time.
- To detect abuse and protect the service, for example rate limiting and duplicate detection: our legitimate interest in security (Article 6(1)(f)).
- To provide results to the organisation that commissioned the study: its instructions as controller.
- To comply with legal obligations (Article 6(1)(c)).
SMS and consent
We collect phone numbers and SMS opt-in consent only with your express consent, given inside a survey. Phone numbers and SMS opt-in consent are never sold, rented or shared with third parties or affiliates for marketing or promotional purposes. We use them only to send the reminder and follow-up messages you agreed to receive.
Message frequency varies by study. Reply STOP to stop receiving messages at any time, or reply HELP for help. Message and data rates may apply. See our SMS terms for full program details.
Who we share it with
- The organisation that invited you to the survey, for that study only.
- Service providers that process data on our behalf under contract: Microsoft Azure (hosting, storage and email delivery) and Twilio (SMS delivery). They may use the data only to provide those services.
- Authorities, where required by law or to protect rights, safety or security.
We do not sell personal information and we do not use it for advertising.
International transfers
Our service is hosted on Microsoft Azure in the United States. Where personal information of people in the European Economic Area, the United Kingdom or Switzerland is transferred outside those regions, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum and, where the provider is certified, the EU-US Data Privacy Framework, together with additional safeguards such as encryption. A copy of the relevant safeguards is available on request.
How long we keep it
Survey data is kept for the duration of the study and the retention period agreed with the organisation running it, then deleted or anonymised. Contact details collected for reminders are deleted once the agreed messages have been sent or you withdraw consent, except for the record needed to honour an opt-out. Technical logs are kept for up to 90 days. We may keep anonymised, aggregated data that no longer identifies anyone.
Security
Data is encrypted in transit and at rest. Access is restricted to the people and systems that need it, each organisation's data is kept separate, and access is logged. No system is perfectly secure, but we work to protect the information entrusted to us and we will notify the relevant controller and authorities of a personal data breach as the law requires.
Cookies and local storage
This website sets no cookies. A survey uses only strictly necessary browser storage to remember your place in the interview for the duration of your visit. We use no advertising or analytics trackers.
Your rights
Depending on where you live, you have the right to:
- access the personal information we hold about you and receive a copy;
- have inaccurate information corrected;
- have your information erased;
- restrict or object to how it is used, including objecting to processing based on legitimate interests;
- receive the information you provided in a portable, machine-readable format;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. For text messages, replying STOP withdraws consent immediately;
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We make no such decisions;
- lodge a complaint with your data protection supervisory authority. In the EU this is the authority of the country where you live or work; in the UK it is the Information Commissioner's Office.
To exercise a right, email info@take.study. We respond within one month, extendable by two further months for complex requests, and we may ask you to verify your identity. Where the request concerns survey data, we will forward it to the organisation that runs the study, which is the controller, and tell you who it is.
California and other US residents
If you live in a US state with a consumer privacy law, you have comparable rights to know, delete and correct, and to opt out of sale or sharing. We do not sell or share personal information as those laws define it, and we do not discriminate against anyone for exercising their rights.
Children
Our services are not directed at children under 13, or under 16 where local law sets a higher age. We do not knowingly collect personal information from them. If you believe a child has provided information, contact us and we will delete it.
Changes
We may update this policy from time to time. The effective date above shows when it was last changed. Material changes are announced on this page.
Contact
Questions about this policy or about your personal information: info@take.study.